PatchTheCVEw3eden vulnerabilities
Recent CVEs affecting w3eden products. 9 tracked.
w3eden has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2025-05-15. Highest priority: CVE-2024-11740 (score 50/100).
- CVE-2025-1785 MEDIUM 5.4 UPGRADE The Download Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and incl
- CVE-2024-8444 MEDIUM 5.4 UPGRADE The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leadin
- CVE-2024-8284 MEDIUM 4.8 UPGRADE The Download Manager WordPress plugin before 3.2.99 does not sanitise and escape some of its settings, which c
- CVE-2024-6208 MEDIUM 6.4 UPGRADE The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm_
- CVE-2024-56217 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Shahjada Download Manager download-manager allows Exploiting Incorrectl
- CVE-2024-13126 MEDIUM 4.6 UPGRADE The Download Manager WordPress plugin before 3.3.07 doesn't prevent directory listing on web servers that don'
- CVE-2024-11768 MEDIUM 5.3 UPGRADE The Download Manager plugin for WordPress is vulnerable to unauthorized download of password-protected content
- CVE-2024-11740 HIGH 7.3 UPGRADE The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions u
- CVE-2024-10706 MEDIUM 4.8 UPGRADE The Download Manager WordPress plugin before 3.3.03 does not sanitise and escape some of its settings, which c
FAQ
How do I fix w3eden vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is w3eden being exploited right now?
None of the tracked w3eden CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which w3eden CVE should I patch first?
CVE-2024-11740 currently ranks highest (50/100): The The Download Manager plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions u.